sharem

SHAREM 欢迎使用 SHAREM！ SHAREM 在 DEFCON 31 的“Game-Changing Advances in Windows Shellcode Analysis”以及 Black Hat USA Arsenal 上进行了展示。Trellix 的 Max Kersten 提供了一个配套的 Ghidra 插件（单独发布）。因此，如果你愿意，可以将 SHAREM 的强大功能扩展到 Ghidra。 SHAREM 旨在成为终极的 Windows shellcode 工具，支持模拟超过 45,000 个 WinAPI、几乎所有用户模式 Windows...

radare2-scripts

radare2 脚本 概述 一组用于 radare2 的脚本集合。 r2bincarver.py - 用于从内存转储中雕刻文件的脚本。 r2hashfuncdecoder.py - 用于解码哈希函数的脚本，常见于 shellcode 中。 脚本 二进制文件雕刻器 该脚本可根据给定的偏移量和大小，从内存转储（MDMP）中雕刻文件。 除了雕刻功能外，它还支持对雕刻出的 PE 文件进行基本修补。 在编写本文时，它将修补 PE 节头中的偏移量。 依赖要求 pip install r2pipe 使用默认参数的示例输出： 示例 $ python2 ./r2bincarver.py...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu is a...

REW-sploit

REW-sploit 需要帮助分析来自 Metasploit Framework 或 Cobalt Strike （可能还有其他恶意或混淆代码）的 Windows shellcode 或攻击？是否需要通过简单脚本自动化任务？是否需要通过从 payload 中提取密钥来解密 MSF 生成的流量？ REW-sploit 为帮助蓝队而生！ 这里有一个快速演示： 该工具的介绍已在 Insomni'hack 2022 上发布： https://www.youtube.com/watch?v=-sjM0k0hvMU 安装 安装非常简单。我强烈建议为它创建一个专用的 Python 环境： python...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

Copy Fail ARM64 Research CVE-2026-31431 Analysis and ARM64...

REW-sploit - Emulate And Dissect MSF And *Other* Attacks

REW-sploit The tool has been presented at Black-Hat Arsenal USA 2021 https://www.blackhat.com/us-21/arsenal/schedule/index.htmlrew-sploit-dissecting-metasploit-attacks-24086 Slides of presentation are available at https://github.com/REW-sploit/REW-sploitdocs Need help in analyzing Windows shellco...

Word type confusion vulnerability principle analysis of CVE-2 0 1 5-1 6 4 1-a vulnerability warning-the black bar safety net

The aforementioned word in parsing the docx document processing displacedByCustomXML attribute not customXML object for authentication, can be passed to other tags of the object to be processed, causing the type of Confusion, leading to arbitrary memory write, and ultimately through a carefully...

Linux/x86 execve "/bin/sh" - shellcode 35 bytes

Linux/x86 execve "/bin/sh" - shellcode 35 bytes. Shellcode exploit for linx86 platform / ; Title: Linux/x86 execve "/bin/sh" - shellcode 35 bytes ; Platform: linux/x8664 ; Date: 2014-06-26 ; Author: Mohammad Reza Espargham ; Simple ShellCode section .text: 08048060 : 8048060: eb 17 jmp 8048079...

win32/7 Obfuscated Shellcode Download And Execute [Dynamic Lenth]

Title: Obfuscated Shellcode Windows x86 Download And Execute Use PowerShell - Generator length: Dynamic ! depend on url and filename Date: 20 January 2015 Author: Ali Razmjoo tested On: Windows 7 x64 ultimate WinExec = 0x77b1e695 ExitProcess = 0x77ae2acf ==================================== Execu...

IE7 0day shellcode analysis（1）-bug warning-the black bar safety net

Simple to write about, shellcode is as follows, before executing the 0A0FF9C0 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A ................ 0A0FF9D0 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A ................ 0A0FF9E0 0A 0A 0A 0A 0A 0A 0A 0A 0A 0A 9 0 9 0 2 5 0 0 7 5 0 0 .......... 悙%. u...

IE7 0day shellcode analysis（3）-bug warning-the black bar safety net

0A0FFCBE 6 8 3 3 3 2 0 0 0 0 push 3 2 3 3 0A0FFCC3 6 8 7 5 7 3 6 5 7 2 push 7 2 6 5 7 3 7 5 0A0FFCC8 EB 1 5 jmp short 0A0FFCDF 0A0FFCCA 8D4424 0 4 lea eax, dword ptr esp+4 0A0FFCCE 5 0 push eax 0A0FFCCF E8 D1FDFFFF call 0A0FFAA5 0A0FFCD4 5 0 push eax 0A0FFCD5 E8 F9010000 call 0A0FFED3 0A0FFCDA ^ ...

The Flash vulnerability used in shellcode analysis-vulnerability warning-the black bar safety net

Title: 【original】flash vulnerability used in shellcode analysis Author: Regulus small Cong Time: 2008-06-02,1 9:2 9 Links: http://bbs.pediy.com/showthread.php?t=65907 Author home page: http://hi.baidu.com/yicong2007 The purpose: purely to learn, do not for malicious purposes In recent days flash...

the flash vulnerability used in shellcode analysis-vulnerability warning-the black bar safety net

Title: 【original】flash vulnerability used in shellcode analysis Author: Regulus small Cong Time: 2008-06-02,1 9:2 9 Links: http://bbs.pediy.com/showthread.php?t=65907 Author home page: http://hi.baidu.com/yicong2007 The purpose: purely to learn, do not for malicious purposes In recent days flash...

SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit

Exploit for linux platform in category remote exploits ======================================================= SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit ======================================================= / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put...

Dream FTP 1.2 Remote Format String Exploit

Exploit for unknown platform in category remote exploits ========================================== Dream FTP 1.2 Remote Format String Exploit ========================================== include include include include // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation:...